Hacker News Reader

Comment by sneak | Hacker News Reader

Without native apps for iOS to integrate with Safari and apps, password managers are a nonstarter for me.

Presently I use Bitwarden (with a selfhosted Vaultwarden backend) for this reason, and block the phone-home spyware the Bitwarden people ship in the client with DNS blackholing.

Happy to replace it if: a) there is an import path from Bitwarden and b) a good client for iOS that supports the native iOS password manager APIs. I expect further enshittification from Bitwarden in the future, and keep a close eye on new projects like this one as a result.

View on HN

Can you elaborate on the "phoning home" part? I can't find anything about that. It seems to me that that would be a major issue on a password manager.

It’s right there in the app privacy label on the App Store.

Alternately, just log all the traffic out of the app, or check the app’s privacy report (iOS now shows you all the hostnames to which an app connects).

in.appcenter.ms is the phone-home hostname.

I don't know about importing from Bitwarden, but a normal Keepass-database will work for you. All you need is a way to sync a file between all your devices. KeePassium on iOS is Open Soruce and integrates very well.

I've used KeeppassCX for ~5 years and the experience is OK at best compared to 1Password and EnPass (which once had a lifetime payment option).

The connection with Firefox (on Linux) regularly breaks. There's lots of subtle bugs and the UX just isn't on the same level.

I'll also happily jump ship if something better comes along that's open source, has great browser and android integration and self hosted.

I'm also eying Bitwarden / Vaultwarden but migration is a pain

> The connection with Firefox (on Linux) regularly breaks.

If the connection breaks, the green button in the username field that fills in your details, turns into a red cross. If you just click the red cross, keepassxc will immediately reestablish the connection. Then click again to fill in. For me, I only have to do this once after unlocking my database.

Sadly this is often not enough for me to reconnect.

Sorry, I don't use Linux much, so I don't have a recommendation. But one of the key advantages of a Keepass-Database is that theres loads of clients, so maybe try another.

Could the "sync" mechanism be provided by iCloud, Dropbox, etc. so long as it's end-to-end encrypted?

Managing a vault server sounds like a pain.

The advantage of a vault server is that it can rate-limit your login attempts based on your master password in a much better way than layering an encrypted password store on generic cloud/synced storage using modern PAKEs.

StrongBox.

Reply on news.ycombinator.com